Malware spam: "You have 1 new message from bank manager. To read it, please open the attachment down below. "

You have 1 new message from bank manager. To read it, please open the attachment down below.

In the sample I saw there was an attachment see_it_77235678.zip containing a malicious script warning_letter_Bdrh5W.js (detection rate 4/57) and the Malwr analysis of that sample shows that it downloads a binary from:

pvprojekt.pl/oLlqvX

The dropped binary is Locky ransomware with a detection rate of 4/56. All those reports plus these analyses [1][2][3] show network traffic to: